Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier: AjeO5VPWEDaw/hBxMKyL5M3VBQAxH00mkBE5ghu5GvY=
Subject key identifier: EA:BB:41:34:A6:DE:15:A9:80:48:4B:BE:EC:FF:23:9A:7E:6C:C4:87
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 01984A09ECC8257CF793F19F6EEA19B1CD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number: 0105
Signing time: Sun 27 Jul 2025 04:00:21 +0000
Manifest this update: Sun 27 Jul 2025 04:00:21 +0000
Manifest next update: Mon 28 Jul 2025 04:00:21 +0000
Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: a8bS0kfTeUDsnWNo7D5DA4nM+j6xK6c+8cifuYevhzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:ec:c8:25:7c:f7:93:f1:9f:6e:ea:19:b1:cd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Jul 27 04:00:21 2025 GMT
Not After : Jul 28 04:00:21 2025 GMT
Subject: CN=eabb4134a6de15a980484bbeecff239a7e6cc487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:9e:33:e3:b7:05:d2:a0:db:d6:17:56:0f:
76:6c:00:7c:09:7e:3d:8a:d5:bd:29:42:33:3f:75:
b5:a8:e7:77:99:ad:a8:fe:bc:21:07:2c:97:1b:ba:
cc:22:5e:f2:f6:2c:6b:a4:4e:43:51:93:97:30:a1:
05:fb:b3:22:bd:aa:45:d6:95:41:15:44:6d:e9:0d:
da:30:5e:16:23:59:10:6a:22:8f:33:a3:33:b2:30:
94:6a:23:5a:9c:7f:ad:98:c7:24:4d:3c:80:80:fa:
11:58:e7:06:63:9f:e3:2c:eb:fd:51:47:ed:3e:78:
31:45:e5:33:f0:d0:e3:b8:22:37:8d:8b:9f:1f:66:
48:4d:0a:30:8c:fa:7e:79:f0:ff:fe:bd:61:d6:39:
4a:f6:53:17:99:05:d2:b4:b5:f1:0b:43:50:8b:47:
0f:d8:07:a0:2c:d7:02:02:81:b0:7c:69:0e:fa:5e:
06:65:aa:4b:57:28:11:24:96:95:e7:68:3a:46:a4:
b9:9e:21:75:e7:92:b1:5d:f6:a1:54:00:9d:4e:b3:
c1:d2:a0:ff:83:b7:09:b3:74:3e:a6:68:88:82:d4:
f1:fe:c7:1e:48:42:d5:1b:75:75:8b:d3:8d:a2:85:
01:94:73:e2:a1:2b:be:92:31:16:a1:d5:e8:72:aa:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:41:34:A6:DE:15:A9:80:48:4B:BE:EC:FF:23:9A:7E:6C:C4:87
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ec:a2:40:4a:8b:0f:dc:58:d0:ab:bd:75:89:fb:84:d8:32:
54:35:0d:bc:50:ef:20:8c:cd:1d:08:8b:34:64:96:f4:38:33:
c9:b1:cc:74:24:5f:70:c2:2b:01:05:d0:d6:37:f8:84:83:bc:
57:0a:bb:ff:83:72:87:77:5e:20:c8:f7:4d:0e:9f:f3:35:b8:
1e:67:dd:38:14:88:b8:ac:b3:a5:e5:d2:d0:9b:3a:25:73:4a:
8f:a1:33:59:85:0f:df:75:dc:11:d9:d5:ab:14:83:6f:d6:1c:
dd:1b:1d:65:3a:39:97:f8:66:8c:98:80:82:48:bb:8f:b7:35:
3d:ed:93:e6:0d:18:31:01:7f:92:95:73:45:b8:ed:ab:3e:8d:
17:7d:e2:a5:6f:5a:df:10:8f:28:ab:1a:e4:d1:29:99:2d:61:
4a:5f:0f:6c:80:78:c6:a1:9f:c8:10:f9:92:b0:be:06:11:68:
b8:c5:63:5f:57:76:ae:6a:94:59:52:48:27:38:d0:f9:f4:b8:
50:7f:d9:53:89:d9:18:ca:ce:f9:92:d0:f3:77:f8:8f:a0:92:
85:10:4c:8d:b7:5c:b4:8e:84:3c:23:ce:89:cb:b1:e6:12:3c:
a8:d7:fb:99:ea:fb:c9:27:d9:49:9b:22:41:d4:a0:81:a0:af:
15:b3:64:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCezIJXz3k/GfbuoZsc17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy
ZWQzM2UwHhcNMjUwNzI3MDQwMDIxWhcNMjUwNzI4MDQwMDIxWjAzMTEwLwYDVQQD
EyhlYWJiNDEzNGE2ZGUxNWE5ODA0ODRiYmVlY2ZmMjM5YTdlNmNjNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApceeM+O3BdKg29YXVg92bAB8CX49
itW9KUIzP3W1qOd3ma2o/rwhByyXG7rMIl7y9ixrpE5DUZOXMKEF+7MivapF1pVB
FURt6Q3aMF4WI1kQaiKPM6MzsjCUaiNanH+tmMckTTyAgPoRWOcGY5/jLOv9UUft
PngxReUz8NDjuCI3jYufH2ZITQowjPp+efD//r1h1jlK9lMXmQXStLXxC0NQi0cP
2AegLNcCAoGwfGkO+l4GZapLVygRJJaV52g6RqS5niF155KxXfahVACdTrPB0qD/
g7cJs3Q+pmiIgtTx/sceSELVG3V1i9ONooUBlHPioSu+kjEWodXocqqA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq7QTSm3hWpgEhLvuz/I5p+bMSHMB8GA1UdIwQY
MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt
MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0
LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOyiQEqL
D9xY0Ku9dYn7hNgyVDUNvFDvIIzNHQiLNGSW9DgzybHMdCRfcMIrAQXQ1jf4hIO8
Vwq7/4Nyh3deIMj3TQ6f8zW4HmfdOBSIuKyzpeXS0Js6JXNKj6EzWYUP33XcEdnV
qxSDb9Yc3RsdZTo5l/hmjJiAgki7j7c1Pe2T5g0YMQF/kpVzRbjtqz6NF33ipW9a
3xCPKKsa5NEpmS1hSl8PbIB4xqGfyBD5krC+BhFouMVjX1d2rmqUWVJIJzjQ+fS4
UH/ZU4nZGMrO+ZLQ83f4j6CShRBMjbdctI6EPCPOicux5hI8qNf7mer7ySfZSZsi
QdSggaCvFbNkgA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:17 2025 by rpki-client